[Q90-Q106] Free Sales Ending Soon – Use Real GCIH PDF Questions [Apr 12, 2022]

NEW QUESTION 90
You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linux-based server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

NEW QUESTION 91
Which of the following statements about buffer overflow is true?

NEW QUESTION 92
Which of the following is the Web 2.0 programming methodology that is used to create Web pages that are dynamic and interactive?

NEW QUESTION 93
Which of the following attacks saturates network resources and disrupts services to a specific computer?

NEW QUESTION 94
The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in
Microsoft Outlook’s preview pane. The Klez worm gathers email addresses from the entries of the default Windows
Address Book (WAB). Which of the following registry values can be used to identify this worm?

NEW QUESTION 95
Which of the following tools is described in the statement given below?
“It has a database containing signatures to be able to detect hundreds of vulnerabilities in UNIX, Windows, and commonly used web CGI scripts. Moreover, the database detects DdoS zombies and Trojans as well.”

NEW QUESTION 96
TCP/IP stack fingerprinting is the passive collection of configuration attributes from a remote device during standard layer 4 network communications. The combination of parameters may then be used to infer the remote operating system (OS fingerprinting), or incorporated into a device fingerprint.
Which of the following Nmap switches can be used to perform TCP/IP stack fingerprinting?

NEW QUESTION 97
In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain
from a DNS server. The information provided by the DNS zone can help an attacker gather user names, passwords, and
other valuable information. To attempt a zone transfer, an attacker must be connected to a DNS server that is the
authoritative server for that zone. Besides this, an attacker can launch a Denial of Service attack against the zone’s
DNS servers by flooding them with a lot of requests. Which of the following tools can an attacker use to perform a
DNS zone transfer?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 98
Mark works as a Network Administrator for NetTech Inc. The network has 150 Windows 2000 Professional client
computers and four Windows 2000 servers. All the client computers are able to connect to the Internet. Mark is
concerned about malware infecting the client computers through the Internet. What will Mark do to protect the client
computers from malware?
Each correct answer represents a complete solution. Choose two.

NEW QUESTION 99
You want to scan your network quickly to detect live hosts by using ICMP ECHO Requests. What type of scanning will you perform to accomplish the task?

NEW QUESTION 100
Which of the following describes network traffic that originates from the inside of a network perimeter and progresses towards the outside?

NEW QUESTION 101
Which of the following tasks can be performed by using netcat utility?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 102
Which of the following DoS attacks affects mostly Windows computers by sending corrupt UDP packets?

NEW QUESTION 103
You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network.
The company uses Check Point SmartDefense to provide security to the network of the company. You use SmartDefense on the HTTP servers of the company to fix the limitation for the maximum number of response headers allowed.
Which of the following attacks will be blocked by defining this limitation?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 104
Which of the following attacks saturates network resources and disrupts services to a specific computer?

NEW QUESTION 105
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing capability from the server. He is suggesting this as a countermeasure against __________.

NEW QUESTION 106
Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?